Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2020-36193 | PEAR | Archive_Tar | 7.5 High | PEAR Archive_Tar Improper Link Resolution Vulnerability | 2022-08-25 | 2022-09-15 | Unknown |
| CVE-2020-28949 | PEAR | Archive_Tar | 7.8 High | PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability | 2022-08-25 | 2022-09-15 | Unknown |
| CVE-2022-0028 | Palo Alto Networks | PAN-OS | 8.6 High | Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability | 2022-08-22 | 2022-09-12 | Unknown |
| CVE-2022-32894 | Apple | iOS and macOS | 7.8 High | Apple iOS and macOS Out-of-Bounds Write Vulnerability | 2022-08-18 | 2022-09-08 | Unknown |
| CVE-2022-32893 | Apple | iOS and macOS | 8.8 High | Apple iOS and macOS Out-of-Bounds Write Vulnerability | 2022-08-18 | 2022-09-08 | Unknown |
| CVE-2022-2856 | Chromium Intents | 6.5 Medium | Google Chromium Intents Insufficient Input Validation Vulnerability | 2022-08-18 | 2022-09-08 | Unknown | |
| CVE-2022-26923 | Microsoft | Active Directory | 8.8 High | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | 2022-08-18 | 2022-09-08 | Unknown |
| CVE-2022-22536 | SAP | Multiple Products | 10.0 Critical | SAP Multiple Products HTTP Request Smuggling Vulnerability | 2022-08-18 | 2022-09-08 | Unknown |
| CVE-2022-21971 | Microsoft | Windows | 7.8 High | Microsoft Windows Runtime Remote Code Execution Vulnerability | 2022-08-18 | 2022-09-08 | Unknown |
| CVE-2017-15944 | Palo Alto Networks | PAN-OS | 9.8 Critical | Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | 2022-08-18 | 2022-09-08 | Unknown |
| CVE-2022-37042 | Synacor | Zimbra Collaboration Suite (ZCS) | 9.8 Critical | Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability | 2022-08-11 | 2022-09-01 | Known |
| CVE-2022-27925 | Synacor | Zimbra Collaboration Suite (ZCS) | 7.2 High | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability | 2022-08-11 | 2022-09-01 | Known |
| CVE-2022-34713 | Microsoft | Windows | 7.8 High | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | 2022-08-09 | 2022-08-30 | Unknown |
| CVE-2022-30333 | RARLAB | UnRAR | 7.5 High | RARLAB UnRAR Directory Traversal Vulnerability | 2022-08-09 | 2022-08-30 | Known |
| CVE-2022-27924 | Synacor | Zimbra Collaboration Suite (ZCS) | 7.5 High | Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability | 2022-08-04 | 2022-08-25 | Known |
| CVE-2022-26138 | Atlassian | Confluence | 9.8 Critical | Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability | 2022-07-29 | 2022-08-19 | Unknown |
| CVE-2022-22047 | Microsoft | Windows | 7.8 High | Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability | 2022-07-12 | 2022-08-02 | Unknown |
| CVE-2022-26925 | Microsoft | Windows | 5.9 Medium | Microsoft Windows LSA Spoofing Vulnerability | 2022-07-01 | 2022-07-22 | Unknown |
| CVE-2022-29499 | Mitel | MiVoice Connect | 9.8 Critical | Mitel MiVoice Connect Data Validation Vulnerability | 2022-06-27 | 2022-07-18 | Known |
| CVE-2021-4034 | Red Hat | Polkit | 7.8 High | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability | 2022-06-27 | 2022-07-18 | Unknown |
| CVE-2021-30983 | Apple | iOS and iPadOS | 7.8 High | Apple iOS and iPadOS Buffer Overflow Vulnerability | 2022-06-27 | 2022-07-18 | Unknown |
| CVE-2021-30533 | Chromium PopupBlocker | 6.5 Medium | Google Chromium PopupBlocker Security Bypass Vulnerability | 2022-06-27 | 2022-07-18 | Unknown | |
| CVE-2020-9907 | Apple | Multiple Products | 7.8 High | Apple Multiple Products Memory Corruption Vulnerability | 2022-06-27 | 2022-07-18 | Unknown |
| CVE-2020-3837 | Apple | Multiple Products | 7.8 High | Apple Multiple Products Memory Corruption Vulnerability | 2022-06-27 | 2022-07-18 | Unknown |
| CVE-2019-8605 | Apple | Multiple Products | 7.8 High | Apple Multiple Products Use-After-Free Vulnerability | 2022-06-27 | 2022-07-18 | Unknown |
| CVE-2018-4344 | Apple | Multiple Products | 7.8 High | Apple Multiple Products Memory Corruption Vulnerability | 2022-06-27 | 2022-07-18 | Unknown |
| CVE-2022-30190 | Microsoft | Windows | 7.8 High | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | 2022-06-14 | 2022-07-05 | Known |
| CVE-2021-38163 | SAP | NetWeaver | 8.8 High | SAP NetWeaver Unrestricted File Upload Vulnerability | 2022-06-09 | 2022-06-30 | Unknown |
| CVE-2016-2388 | SAP | NetWeaver | 5.3 Medium | SAP NetWeaver Information Disclosure Vulnerability | 2022-06-09 | 2022-06-30 | Unknown |
| CVE-2016-2386 | SAP | NetWeaver | 9.8 Critical | SAP NetWeaver SQL Injection Vulnerability | 2022-06-09 | 2022-06-30 | Unknown |
| CVE-2019-7195 | QNAP | Photo Station | 9.8 Critical | QNAP Photo Station Path Traversal Vulnerability | 2022-06-08 | 2022-06-22 | Known |
| CVE-2019-7194 | QNAP | Photo Station | 9.8 Critical | QNAP Photo Station Path Traversal Vulnerability | 2022-06-08 | 2022-06-22 | Known |
| CVE-2019-7193 | QNAP | QTS | 9.8 Critical | QNAP QTS Improper Input Validation Vulnerability | 2022-06-08 | 2022-06-22 | Known |
| CVE-2019-7192 | QNAP | Photo Station | 9.8 Critical | QNAP Photo Station Improper Access Control Vulnerability | 2022-06-08 | 2022-06-22 | Known |
| CVE-2019-5825 | Chromium V8 | 6.5 Medium | Google Chromium V8 Out-of-Bounds Write Vulnerability | 2022-06-08 | 2022-06-22 | Unknown | |
| CVE-2019-15271 | Cisco | RV Series Routers | 8.8 High | Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability | 2022-06-08 | 2022-06-22 | Unknown |
| CVE-2018-6065 | Chromium V8 | 8.8 High | Google Chromium V8 Integer Overflow Vulnerability | 2022-06-08 | 2022-06-22 | Unknown | |
| CVE-2018-4990 | Adobe | Acrobat and Reader | 8.8 High | Adobe Acrobat and Reader Double Free Vulnerability | 2022-06-08 | 2022-06-22 | Unknown |
| CVE-2018-17480 | Chromium V8 | 8.8 High | Google Chromium V8 Out-of-Bounds Write Vulnerability | 2022-06-08 | 2022-06-22 | Unknown | |
| CVE-2018-17463 | Chromium V8 | 8.8 High | Google Chromium V8 Remote Code Execution Vulnerability | 2022-06-08 | 2022-06-22 | Unknown | |
| CVE-2017-6862 | NETGEAR | Multiple Devices | 9.8 Critical | NETGEAR Multiple Devices Buffer Overflow Vulnerability | 2022-06-08 | 2022-06-22 | Unknown |
| CVE-2017-5070 | Chromium V8 | 8.8 High | Google Chromium V8 Type Confusion Vulnerability | 2022-06-08 | 2022-06-22 | Unknown | |
| CVE-2017-5030 | Chromium V8 | 8.8 High | Google Chromium V8 Memory Corruption Vulnerability | 2022-06-08 | 2022-06-22 | Unknown | |
| CVE-2016-5198 | Chromium V8 | 8.8 High | Google Chromium V8 Out-of-Bounds Memory Vulnerability | 2022-06-08 | 2022-06-22 | Unknown | |
| CVE-2016-1646 | Chromium V8 | 8.8 High | Google Chromium V8 Out-of-Bounds Read Vulnerability | 2022-06-08 | 2022-06-22 | Unknown | |
| CVE-2013-1331 | Microsoft | Office | 7.8 High | Microsoft Office Buffer Overflow Vulnerability | 2022-06-08 | 2022-06-22 | Unknown |
| CVE-2012-5054 | Adobe | Flash Player | 8.8 High | Adobe Flash Player Integer Overflow Vulnerability | 2022-06-08 | 2022-06-22 | Unknown |
| CVE-2012-4969 | Microsoft | Internet Explorer | 8.1 High | Microsoft Internet Explorer Use-After-Free Vulnerability | 2022-06-08 | 2022-06-22 | Unknown |
| CVE-2012-1889 | Microsoft | XML Core Services | 8.8 High | Microsoft XML Core Services Memory Corruption Vulnerability | 2022-06-08 | 2022-06-22 | Unknown |
| CVE-2012-0767 | Adobe | Flash Player | 6.1 Medium | Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability | 2022-06-08 | 2022-06-22 | Unknown |